GandCrab Ransomware Puts the Pinch on Victims | McAfee Blog
Tags
country: Romania Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 File And Directory Discovery - T1420 File Deletion - T1070.004 File Deletion - T1630.002 Malware - T1587.001 Malware - T1588.001 Process Discovery - T1424 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Execution Through Api - T1106 File And Directory Discovery - T1083 File Deletion - T1107 Modify Registry - T1112 Process Discovery - T1057 Query Registry - T1012 System Information Discovery - T1082 Execution Through Api
Show in Graph
Common Information
Type Value
UUID a438b6f4-d99d-4a94-9ff6-c63abadd1a54
Fingerprint f5b47ca18431f6c9
Analysis status DONE
Considered CTI value 2
Text language
Published July 31, 2018, 9:43 p.m.
Added to db Dec. 21, 2022, 4:44 p.m.
Last updated Oct. 24, 2024, 5:55 p.m.
Headline GandCrab Ransomware Puts the Pinch on Victims
Title GandCrab Ransomware Puts the Pinch on Victims | McAfee Blog
Detected Hints/Tags/Attributes 58/3/17
Source URLs
Redirection Url
Details Source https://www.mcafee.com/blogs/other-blogs/mcafee-labs/gandcrab-ransomware-puts-the-pinch-on-victims/
URL Provider
Details Provider Source level domain
Details mcafee.com www.mcafee.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 504 ✔ — https://blogs.mcafee.com/tag/cybercrime/feed 2024-08-31 10:08
Attributes
Details Type #Events CTI Value
Details Domain 18 
nomoreransom.org
Details Domain 4 
gandcrabmfe6mnef.onion
Details sha256 1 
9a80f1866450f2f10fa69b1eb8747c344d6ef038468014c59cc50497f9e4675d
Details sha256 1 
d9466be5c387eb2fbf619a8cd0922b167ea7fa06b63f13cd330ca974cae1d513
Details sha256 1 
43b57d2b16c44041916f3b0562712d5dca4f8a42bc00f00a023b4a0788d18276
Details sha256 1 
786e3c693fcdf55466fd6e5446de7cfeb58a4311442e0bc99ce0b0985c77b45d
Details sha256 1 
f5e74d939a5b329dddc94b75bd770d11c8f9cc3a640dccd8dff765b6997809f2
Details sha256 3 
8ecbfe6f52ae98b5c9e406459804c4ba7f110e71716ebf05015a3a99c995baa1
Details sha256 1 
e454123d852e6a40eed1f2552e1a1ad3c00991541d812fbf24b70611bd1ec40a
Details sha256 1 
0aef79fac6331f9eca49e711291ac116e7f6fbaeb5a1f3eb7fea9e2e4ec6a608
Details sha256 1 
3277c1649972ab5b43ae9e87087b70ea4825956bfdddd1034f7b0680e6d46efa
Details sha256 1 
a92af825bd95b6514f22dea08a4eb6d3491cbad45e69a5b9653b0148ee9f9832
Details sha256 1 
ce093ffa19f020a2b73719f653b5e0423df28ef1d59035d55e99154a85c5c668
Details sha256 1 
a1aae5ae7a3722b83dc1c9b0831c973641b246808de4f3670f2fd916cf498d38
Details sha256 1 
3b0096d6798b1887cffa1288583e93f70e656270119087ceb2f832b69b89260a
Details sha256 1 
e8e948e36fed93061062406693d1b2c402dd8e5788506bfbb50dbd86a5540829
Details Url 2 
http://gandcrabmfe6mnef.onion